General

  • Target

    eb7856b7aef5910a570127af7a95a2ff_JaffaCakes118

  • Size

    836KB

  • Sample

    240919-q64f1asdmm

  • MD5

    eb7856b7aef5910a570127af7a95a2ff

  • SHA1

    3331364b06ad31c6953009dd838f8a1c3c98d6ec

  • SHA256

    c18f54bdea2fb66a02a2f871de2b02c1f4ff8bc40789eb17a7050a6926e26230

  • SHA512

    3f3a5e81bf6dcd0c0bc9355c67c339e2faead9de638dc89a11a544fe6984a75d10e94de2691b86f669c370a154be447fc77d528bd8bcc5f3a9a408317483bf19

  • SSDEEP

    24576:JPipyklwCMvru5KKTOFWQbwRseoT0u28mczO7+:JPi+VWQb28T0dczA+

Malware Config

Targets

    • Target

      eb7856b7aef5910a570127af7a95a2ff_JaffaCakes118

    • Size

      836KB

    • MD5

      eb7856b7aef5910a570127af7a95a2ff

    • SHA1

      3331364b06ad31c6953009dd838f8a1c3c98d6ec

    • SHA256

      c18f54bdea2fb66a02a2f871de2b02c1f4ff8bc40789eb17a7050a6926e26230

    • SHA512

      3f3a5e81bf6dcd0c0bc9355c67c339e2faead9de638dc89a11a544fe6984a75d10e94de2691b86f669c370a154be447fc77d528bd8bcc5f3a9a408317483bf19

    • SSDEEP

      24576:JPipyklwCMvru5KKTOFWQbwRseoT0u28mczO7+:JPi+VWQb28T0dczA+

    • ModiLoader, DBatLoader

      ModiLoader is a Delphi loader that misuses cloud services to download other malicious families.

    • ModiLoader Second Stage

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks